Privacy Policy

Hello!

If you have found your way to this page, it means that the protection of your personal data is important to you. We want to assure you that we care about your privacy. In order to strengthen its protection, we have implemented not only legal measures, but also technical ones.

In accordance with the GDPR, we present below the principles of our processing of your personal data. Please familiarize yourself with the most important questions relating to your personal data. In case of any doubts regarding the Privacy Policy, please contact us at: contact@jarmula.studio

PRIVACY POLICY

§1 Who is the Controller of your personal data?

The Controller is JRML Spolka z Ograniczona Odpowiedzialnością with its registered office in Warsaw, NIP: 1133127970, REGON: 528089014, registered in the National Court Register under number 0001094523. You can contact the Controller by writing to the e-mail address: contact@jarmula.studio

§2 For what purpose do we collect your data and how long do we store it?

We may process your data for the following purposes:

  1. Communication with you, including providing answers to questions submitted via the contact form, e-mail, etc.;

The data will be processed based on the legitimate interest of the Controller, in the form of communication with the Users of the Website (art. 6 sec. 1 lit. f of the GDPR). Your data will be processed no longer than until you object or the business purpose ceases to exist. Providing this data is voluntary, but at the same time necessary to communicate with you. The data may also be processed during the archiving process for internal purposes, based on the legitimate interest of the Controller (art. 6 sec. 1 lit. f of the GDPR), until you object or the business purpose ceases to exist.

  1. Conclusion and performance of the agreement (placing an order);
  2. Establishing, defending and pursuing claims;
  1. Fulfillment of legal obligations incumbent on the Controller (including tax and archiving obligations);

Data necessary to conclude and perform the agreement will be processed during the term of the agreement, including the period of exercising the rights resulting from the agreement, such as the right to file a complaint under warranty (art. 6 sec. 1 lit. b and f of the GDPR). Providing this data is voluntary, but at the same time necessary to conclude and perform the agreement.

Additional data provided in order to, among other things, facilitate the performance of the agreement, will be processed no longer than until you object or the business purpose ceases to exist, based on the legitimate interest in the form of customer service (art. 6 sec. 1 lit. f of the GDPR).

After this time, the data will be processed for the period of limitation of claims, based on the legitimate interest of the Controller in order to defend against claims, as well as to establish and pursue claims (art. 6 sec. 1 lit. f of the GDPR).

In the event that the data are necessary to fulfill the legal obligations incumbent on the Controller (such as issuing and storing invoices, implementing procedures resulting from the Act on Digital Services) – the data will be processed for this purpose for no longer than 6 years (archiving obligations regarding accounting documents), unless the provisions of law provide otherwise (art. 6 sec. 1 lit. c of the GDPR).

The data may also be archived for internal and statistical purposes, until you object or the business purpose ceases to exist, based on the legitimate interest of the Controller (art. 6 sec. 1 lit. f of the GDPR).

  1. Providing marketing information (including sending newsletters and information about services, products, promotions, free content using other tools, e.g. chatbot, telephone); 

The data will be processed based on the legitimate interest of the Controller, in the form of marketing of the Controller’s products and services (art. 6 sec. 1 lit. f of the GDPR). The data will be processed no longer than until you object or the business purpose ceases to exist – whichever comes first. Providing data is voluntary, however, it is necessary to receive marketing/commercial information.

  1. Administration and management of the website and groups on social media platforms (including Facebook(Meta), Instagram, TikTok) in the case of data processing on social media platforms, including communication and directing marketing content; 

This data will be processed only if you decide to: like the page / join the group / select the “Follow” option or otherwise leave your data on the platform managed by me, e.g. in the form of posting an entry or comment. The data will be processed for the duration of the page/group or until you object, which can be done by clicking “Like”, “Follow”, deleting the comment/entry or in another way provided on the platform/page or by contacting me. Please note that the rules relating to the page/fanpage/group are set by the Administrator, while the rules for using the social networking portal on which the page/fanpage/group is placed are set by the entity managing these portals.

  1. Analytical and statistical; Data processing for analytical and statistical purposes consists in particular in the analysis of data obtained automatically when using the website, including cookies. Data is processed on the basis of the legitimate interest of the Administrator, in the form of adapting the content of the Website to the preferences of the User and optimizing the use of the Website; creating statistics that help to understand how Users use the Website, which allows for improving its structure and content (Article 6(1)(f) GDPR). The data may also be archived for internal and statistical purposes, based on the legitimate interest of the Administrator (Article 6(1)(f) GDPR), until you object or the business purpose ceases.
  2. Recovery of rejected baskets; In the event that you do not complete your order, you will receive a reminder of the order that you started but did not complete. Data will be processed on the basis of the Administrator’s legitimate interest, in the form of serving potential customers and real customers (Article 6(1)(f) GDPR). These data will be processed for the period necessary to achieve business goals or until an objection is raised.
  3. Posting comments; The data visible on our Website with the posted comment are processed by us for the purpose of administering and operating the Website, and also serve to communicate with you on the basis of the Administrator’s legitimate interest (Article 6(1)(f)), for the time necessary to achieve business goals or until an objection is raised.
  1. In accordance with art. 10 of the Act on the Provision of Electronic Services, for the purpose of maintaining commercial and telephone communication, I need your consent. You can withdraw it at any time by clicking the link in the footer of the e-mail Promotion and marketing;

In the event that you provide us with your data, in particular in the form of an opinion on a product or service, including data on image, they will be processed on the basis of the Administrator’s legitimate interest in the form of marketing, for the purpose of improving the quality of services and products and promoting the services and products of the Administrator. These data will be processed for the period necessary to achieve business goals or until an objection is raised. Providing data is voluntary.

  1. Collection of sensitive data; 

Sensitive data is collected for the purpose of fulfilling the contract and its proper performance – on the basis of your conscious and voluntary consent (Article 9(2)(a) GDPR) – until the business purpose ceases or consent is withdrawn. Providing data is voluntary, but it is necessary for the proper performance of the contract.

  1. Recruitment; 

Data may be processed for the period necessary for the recruitment process and the conclusion of the contract (Article 6(1)(b) and Article 6(1)(c) GDPR), and in the case of additional data, voluntarily provided – on the basis of your consent. They may also be used for future recruitment purposes – on the basis of your consent – for a maximum period of 3 years (this period is calculated from the end of the year in which the application was obtained). Providing personal data is voluntary, but providing some data may be necessary for the recruitment process, as well as for the conclusion of the contract. The consequence of not providing this data will be the failure to take the above actions.

$3 To whom can we transfer your data?

We only transfer your data to other entities when it is necessary to achieve the processing purposes referred to in §2 and only to the extent necessary to achieve this purpose. In principle, we collect and process only those data that you have provided to us, with the exception of data collected automatically (cookies). You can find more about cookies in §7.

If necessary, your data may be transferred to entities with whom we cooperate to achieve the above purposes, in particular to the hosting company, the IT company / the entity managing the website, the company providing accounting and bookkeeping services, the company providing the invoice program, the company providing newsletter services, the company providing cloud services, entities providing marketing services, entities providing administrative services, entities providing consulting services, subcontractors, lawyers, couriers or postal operators, training platform, social platform, customer service platform, product or service distribution platform, other entities that support the Administrator in the implementation of the processing purposes.

In principle, data will not be transferred outside the EEA, with the exception of the situations described below. In other cases, if data is transferred outside the EEA, this will be done on the basis of your consent, standard contractual clauses or on the basis of other safeguards provided for in the GDPR, after fulfilling, among others, the information obligation.

Services provided by Google or Facebook (META) are generally performed by entities headquartered in the European Union. However, due to the global nature of these entities, your data may be transferred to the US, in connection with their storage on American servers (in whole or in part). Regardless, Google and Facebook have implemented safeguards in accordance with the requirements of the GDPR, aimed at protecting personal data, through the use of standard contractual clauses. More information about the data processing rules of the above providers can be found in the Privacy Policies of each entity.

Your data (if it results from the purpose of processing) may also be transferred outside the EEA to the following entities:

  1. Asana, Inc., 1550 Bryant Street, 2nd Floor San Francisco, California 94103,
  2. TikTok Inc., 5800 Bristol Parkway, Suite 100,Culver CIty, CA 90230, USA
  3. TikTok Pte. Limited, One Raffles Quay,#26-10, South Tower, SINGAPORE 048583

§4 What rights do you have? In connection with the GDPR, you have the right to access your personal data, correct your personal data, delete your personal data, restrict the processing of your personal data, object to the processing of your personal data, transfer your personal data, withdraw your consent to the processing of data; withdrawal of consent does not affect the legality of the processing carried out before its withdrawal. Detailed information on the above rights can be found in the GDPR, i.e. in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation). If you believe that your personal data is being processed in violation of the applicable law, you have the right to file a complaint with the President of the Office for Personal Data Protection. In such a case, however, I encourage you to contact me in advance to clarify your doubts.

§5 Are your data profiled? The Administrator analyzes personal data in an automated way, using tools provided by software providers (e.g. using statistics, history), exclusively in a manner that does not have any legal consequences for you or does not significantly affect your situation, including your guaranteed rights and freedoms. The purpose of processing data in an automated way is to learn about the preferences of Users (more information on the analysis can be found in §7 Cookie Policy). 

§6 Applicable laws on personal data In cases not regulated, the relevant laws, including European law (including GDPR), shall apply.

§7 Cookie Policy

The Site does not collect any information automatically, except for information contained in cookies. This data is collected in a way that does not allow the identification of the User, so-called anonymous data. Cookies (so-called “cookies”) are data, in particular text files, which are stored on the User’s end device and are intended for use of the Site. Cookies usually contain the name of the website from which they originate, the time they are stored on the end device and a unique number. Cookies are used to: adapt the content of the Site to the User’s preferences and to optimize the use of the Site, as well as to create statistics that help to understand how Users use the Site, which makes it possible to improve its structure and content. You can make changes to the cookie settings yourself. In many cases, the internet browser by default allows cookies to be stored on the User’s end device. Detailed information on the possibility and methods of handling cookies is available in the software settings (web browser). Failure to accept cookies may limit the functionality of some features on the Site.

The Administrator uses technologies that monitor the actions taken by the User within the Site:

  • Facebook conversion pixel provided by Meta Platforms Ireland Limited – for the purpose of managing advertising on Meta and conducting remarketing activities; Facebook Pixel is a piece of code published on a website that allows you to reach a target group based on data of people who have used the website. Within the Facebook Pixel function, it is therefore possible to display published ads on portals belonging to Meta exclusively to users of the portal who have shown interest in products or services or have common factors with the above persons. These data are processed on the basis of the Administrator’s legitimate interest (Article 6(1)(f) GDPR). Detailed information on the Facebook Pixel can be found on the Facebook Privacy Policy (Meta) page.
  • Google tools, including Google Analytics provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The data obtained from the use of the above tool is used by me to analyze the statistics of the Site. Google Analytics uses its own cookies to analyze the actions and behaviors of Site Users. These files are used to store information, e.g. from which page the User came to the current website. They help to improve the Site. These data are processed on the basis of the Administrator’s legitimate interest (Article 6(1)(f) GDPR). Detailed information on Google Analytics can be found on the page: Google tool usage policy.

§8 Social plugins 

The Site uses plugins, widgets, and other social tools provided by portals such as: Facebook (Meta), Instagram, YouTube, LinkedIn, TikTok. The rules for processing personal data are described directly on the websites of the above Service Providers.

§9 Joint controllership 

Data processed for the purposes of statistics collected within the Facebook (Meta) platform is jointly controlled by the Administrator and Meta Platforms Ireland Limited, located at 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland, hereinafter referred to as the Joint Controller. Detailed rules regarding joint controllership of data, including information on the rights you have, are described on the Privacy Policy page.

  • Data processed within the LinkedIn platform is jointly controlled by the Administrator and LinkedIn Ireland Unlimited Company, address: Legal Dept. (Privacy Policy and User Agreement), Wilton Place, Dublin 2, Ireland, hereinafter referred to as the Joint Controller. Detailed rules regarding joint controllership of data, including information on the rights you have, are described on the Privacy Policy page.
  • The Administrator processes data on the basis of the Administrator’s legitimate interest, consisting of analyzing the activity of Users, as well as their preferences, in order to improve the functionalities used and the services provided. In matters relating to personal data, you can contact both the Administrator and the Joint Controller.

No products in the cart.